Pin deps

Author: jdalton

package-lock.json

@@ -57,52 +57,52 @@
     "update:longtask:test:npm:package-json": "node ./scripts/update-test-npm-package-json.js"
   },
   "devDependencies": {
-    "@biomejs/biome": "^1.9.4",
-    "@eslint/compat": "^1.2.8",
-    "@eslint/js": "^9.24.0",
-    "@mdn/browser-compat-data": "^6.0.4",
-    "@npmcli/package-json": "^6.1.1",
-    "@socketregistry/packageurl-js": "^1.0.5",
+    "@biomejs/biome": "1.9.4",
+    "@eslint/compat": "1.2.8",
+    "@eslint/js": "9.24.0",
+    "@mdn/browser-compat-data": "6.0.5",
+    "@npmcli/package-json": "6.1.1",
+    "@socketregistry/packageurl-js": "1.0.5",
     "@socketregistry/scripts": "file:./scripts",
     "@socketsecurity/registry": "file:./registry",
-    "@tapjs/run": "^4.0.2",
-    "@types/fs-extra": "^11.0.4",
-    "@types/node": "^22.14.0",
-    "@types/npmcli__package-json": "^4.0.4",
-    "@types/npmcli__promise-spawn": "^6.0.3",
-    "@types/semver": "^7.7.0",
-    "@types/validate-npm-package-name": "^4.0.2",
-    "@types/which": "^3.0.4",
-    "@zkochan/js-yaml": "^0.0.7",
-    "cross-env": "^7.0.3",
-    "custompatch": "^1.1.4",
-    "del-cli": "^6.0.0",
-    "didyoumean2": "^7.0.4",
-    "eslint": "^9.24.0",
-    "eslint-import-resolver-oxc": "^0.13.1",
-    "eslint-plugin-import-x": "^4.10.2",
-    "eslint-plugin-n": "^17.17.0",
-    "eslint-plugin-sort-destructure-keys": "^2.0.0",
-    "eslint-plugin-unicorn": "^56.0.1",
-    "eta": "^3.5.0",
-    "fs-extra": "^11.3.0",
-    "globals": "^16.0.0",
-    "husky": "^9.1.7",
-    "knip": "^5.50.2",
-    "lint-staged": "^15.5.0",
-    "npm-package-arg": "^12.0.2",
-    "npm-run-all2": "^7.0.2",
-    "out-url": "^1.2.2",
+    "@tapjs/run": "4.0.2",
+    "@types/fs-extra": "11.0.4",
+    "@types/node": "22.14.1",
+    "@types/npmcli__package-json": "4.0.4",
+    "@types/npmcli__promise-spawn": "6.0.3",
+    "@types/semver": "7.7.0",
+    "@types/validate-npm-package-name": "4.0.2",
+    "@types/which": "3.0.4",
+    "@zkochan/js-yaml": "0.0.7",
+    "cross-env": "7.0.3",
+    "custompatch": "1.1.4",
+    "del-cli": "6.0.0",
+    "didyoumean2": "7.0.4",
+    "eslint": "9.24.0",
+    "eslint-import-resolver-oxc": "0.13.1",
+    "eslint-plugin-import-x": "4.10.2",
+    "eslint-plugin-n": "17.17.0",
+    "eslint-plugin-sort-destructure-keys": "2.0.0",
+    "eslint-plugin-unicorn": "56.0.1",
+    "eta": "3.5.0",
+    "fs-extra": "11.3.0",
+    "globals": "16.0.0",
+    "husky": "9.1.7",
+    "knip": "5.50.2",
+    "lint-staged": "15.5.1",
+    "npm-package-arg": "12.0.2",
+    "npm-run-all2": "7.0.2",
+    "out-url": "1.2.2",
     "oxlint": "0.16.5",
-    "read-yaml-file": "^2.1.0",
-    "semver": "^7.7.1",
-    "ssri": "^12.0.0",
-    "tinyglobby": "^0.2.12",
-    "tsx": "^4.19.3",
+    "read-yaml-file": "2.1.0",
+    "semver": "7.7.1",
+    "ssri": "12.0.0",
+    "tinyglobby": "0.2.12",
+    "tsx": "4.19.3",
     "typescript": "5.8.3",
-    "typescript-eslint": "^8.29.1",
-    "update-browserslist-db": "^1.1.3",
-    "which": "^5.0.0"
+    "typescript-eslint": "8.29.1",
+    "update-browserslist-db": "1.1.3",
+    "which": "5.0.0"
   },
   "workspaces": [
     "packages/npm/*",

package.json

@@ -623,8 +623,8 @@
     "yoctocolors-cjs": "2.1.2"
   },
   "devDependencies": {
-    "@inquirer/type": "^3.0.6",
-    "@types/pacote": "^11.1.8"
+    "@inquirer/type": "3.0.6",
+    "@types/pacote": "11.1.8"
   },
   "engines": {
     "node": ">=18.20.7"

registry/package.json

@@ -124,7 +124,7 @@ async function installTestNpmNodeModules(options) {
     [
       'install',
       '--ignore-scripts',
-      ...(Array.isArray(specs) ? ['--save-dev', ...specs] : [])
+      ...(Array.isArray(specs) ? ['--save-dev', '--save-exact', ...specs] : [])
     ],
     { cwd: testNpmPath, stdio: 'ignore' }
   )